bmad-product-brief

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose and local file/script behavior are broadly consistent with a product-brief skill, and the explicit uv dependency is official and verifiable. The main concerns are transitive invocation of other skills, execution of unseen local scripts, and unresolved external handoff/tool registry destinations, which make the skill's effective footprint larger and less reviewable than the visible instructions alone.

Confidence: 83%Severity: 52%
Audit Metadata
Analyzed At
Sep 17, 2026, 07:34 AM
Package URL
pkg:socket/skills-sh/bmad-code-org%2Fbmad-plugins%2Fbmad-product-brief%2F@03201ff713f3e4ca00323666d394798efd3a50afed9ff638c01456383463b0e2